{"id":"CVE-2019-1010043","aliases":["DEBIAN-CVE-2019-1010043","EUVD-2019-1793","GHSA-9m6m-33c2-g88x","UBUNTU-CVE-2019-1010043"],"status":"published","title":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and...","description":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02306,"percentile":0.83471,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-787"],"published":"2019-07-16T13:11:34Z","modified":"2026-10-17T12:55:29Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20221123.70d07d9+dfsg-1","1.36+u20230419.47c9641+dfsg-1","1.36+u20230706.10a45cb+dfsg-1","1.36+u20230819.b1e6ef1+dfsg-1","1.36+u20231123.972635e+dfsg-1","1.36+u20240217.7d711f8+dfsg-1","1.36+u20240714.15f5fe7+dfsg-1","1.36+u20240727.4c19ff2+dfsg-1","1.36+u20241011.cc18246+dfsg-1","1.36+u20250316.526edd3+dfsg-1","1.36+u20250820.03c5ee0+dfsg-1","1.36+u20250822.9d2227c+dfsg-1","1.36+u20250822.9d2227c+dfsg-2","1.36+u20250830.2b516c5+dfsg-1","1.36+u20250830.3e0b279+dfsg-1","1.36+u20250901.45788d2+dfsg-1","1.36+u20250908.3d8979f+dfsg-1","1.36+u20251029.a553ad1+dfsg-1","1.36+u20251111.fcde284+dfsg-1","1.36+u20251206.e29c74e1+dfsg-1","1.36+u20251228.3ef30e75+dfsg-1","1.36+u20260309.5956299e+dfsg-1","1.36+u20260719.58839361+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20250316.526edd3+dfsg-1","1.36+u20250820.03c5ee0+dfsg-1","1.36+u20250822.9d2227c+dfsg-1","1.36+u20250822.9d2227c+dfsg-2","1.36+u20250830.2b516c5+dfsg-1","1.36+u20250830.3e0b279+dfsg-1","1.36+u20250901.45788d2+dfsg-1","1.36+u20250908.3d8979f+dfsg-1","1.36+u20251029.a553ad1+dfsg-1","1.36+u20251111.fcde284+dfsg-1","1.36+u20251206.e29c74e1+dfsg-1","1.36+u20251228.3ef30e75+dfsg-1","1.36+u20260309.5956299e+dfsg-1","1.36+u20260719.58839361+dfsg-1"]},{"source":"osv","ecosystem":"Debian:14","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20250316.526edd3+dfsg-1","1.36+u20250820.03c5ee0+dfsg-1","1.36+u20250822.9d2227c+dfsg-1","1.36+u20250822.9d2227c+dfsg-2","1.36+u20250830.2b516c5+dfsg-1","1.36+u20250830.3e0b279+dfsg-1","1.36+u20250901.45788d2+dfsg-1","1.36+u20250908.3d8979f+dfsg-1","1.36+u20251029.a553ad1+dfsg-1","1.36+u20251111.fcde284+dfsg-1","1.36+u20251206.e29c74e1+dfsg-1","1.36+u20251228.3ef30e75+dfsg-1","1.36+u20260309.5956299e+dfsg-1","1.36+u20260719.58839361+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20150710+dfsg1-1","1.36+u20150926+dfsg1-1","1.36+u20151017+dfsg1-1","1.36+u20160122+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20170803+dfsg1-1","1.36+u20171016~dfsg-1","1.36+u20171122~dfsg-1","1.36+u20171216~dfsg-1","1.36+u20180108~dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20190529.350b8f9~dfsg-2","1.36+u20191029.dc0c3e7~dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20201117.d1b7ab6~dfsg-1","1.36+u20210927.2678080~dfsg-1","1.36+u20211208.84daa28~dfsg-1","1.36+u20220205.c0f2964~dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20230706.10a45cb+dfsg-1","1.36+u20230819.b1e6ef1+dfsg-1","1.36+u20231123.972635e+dfsg-1","1.36+u20240217.7d711f8+dfsg-1","1.36+u20240217.7d711f8+dfsg-1build1","1.36+u20240217.7d711f8+dfsg-1build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20241011.cc18246+dfsg-1","1.36+u20250316.526edd3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20251228.3ef30e75+dfsg-1","1.36+u20260309.5956299e+dfsg-1","1.36+u20260719.58839361+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ioquake3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36+u20250316.526edd3+dfsg-1","1.36+u20251029.a553ad1+dfsg-1","1.36+u20251111.fcde284+dfsg-1","1.36+u20251206.e29c74e1+dfsg-1","1.36+u20251228.3ef30e75+dfsg-1"]}],"products":[{"vendor":"quake3e","product":"quake3e"},{"vendor":"quake3e_project","product":"quake3e"}],"references":[{"url":"https://github.com/ec-/Quake3e/issues/9","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010043"},{"url":"https://github.com/advisories/GHSA-9m6m-33c2-g88x"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-1010043","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-1010043","tags":["report"]},{"url":"https://github.com/ec-/Quake3e/commit/fea3c4144c7b325634cdf638d1582c772a2db3bd","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1010043","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-1010043","description":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.","status":"published","published":"2019-07-16T13:11:34Z","modified":"2024-08-05T03:07:18.064Z","updated_at":"2026-11-02T14:20:24.989116Z"}],"euvd":[{"id":"EUVD-2019-1793","description":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.","status":"published","published":"2019-07-16T13:11:34Z","modified":"2024-08-05T03:07:18Z","updated_at":"2026-11-03T02:40:19.294113Z"}],"ghsa":[{"id":"GHSA-9m6m-33c2-g88x","title":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and...","description":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.","status":"published","published":"2022-05-24T16:50:26Z","modified":"2024-04-04T01:16:48Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:55:56.730661Z"}],"nvd":[{"id":"CVE-2019-1010043","description":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.","status":"published","published":"2019-07-16T14:15:11.733Z","modified":"2026-06-17T02:09:45.007Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:19.195714Z"}],"osv":[{"id":"CVE-2019-1010043","description":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.","status":"published","published":"2019-07-16T14:15:11.733Z","modified":"2026-03-14T09:31:34.174694Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:10.051046Z"},{"id":"DEBIAN-CVE-2019-1010043","description":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.","status":"published","published":"2019-07-16T14:15:11.733Z","modified":"2026-09-21T07:00:20.230069689Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"UBUNTU-CVE-2019-1010043","description":"Quake3e \u003c 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.","status":"published","published":"2019-07-16T14:15:00Z","modified":"2026-10-17T12:55:29.713876234Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:18.772093Z"}]}}